Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/GTUbUdqF63pasUjXOrW9rhFZ4Gs.roa
File:                     GTUbUdqF63pasUjXOrW9rhFZ4Gs.roa (raw, json)
Hash identifier:          pXOVpzs5kBMLvLYMOy1HmXTVniNNs3qgCzxJtNdtg/A=
Subject key identifier:   19:35:1B:51:DA:85:EB:7A:5A:B1:48:D7:3A:B5:BD:AE:11:59:E0:6B
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       38
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/GTUbUdqF63pasUjXOrW9rhFZ4Gs.roa
Signing time:             Sat 30 Nov 2024 01:29:36 +0000
ROA not before:           Sat 30 Nov 2024 01:29:36 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     131923
IP address blocks:        218.45.64.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov 30 01:29:36 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=19351B51DA85EB7A5AB148D73AB5BDAE1159E06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:77:89:85:42:c7:15:ac:f3:2a:32:82:01:
                    d2:82:18:ed:f0:f3:6c:8b:6e:05:75:06:60:0b:c7:
                    9e:e5:ca:71:2a:7a:16:16:9a:18:d5:87:ed:49:d5:
                    6c:00:44:a6:f7:5a:de:5c:65:c6:72:ea:b5:8b:84:
                    cc:45:09:a1:b1:22:ae:02:f8:69:68:3b:b2:f8:7c:
                    08:c9:25:f4:0a:8f:89:0a:9b:41:27:4b:b1:db:21:
                    b2:a4:48:b6:10:b8:71:e2:e6:11:2c:5b:bb:17:8f:
                    fa:99:e1:00:cd:02:e0:1e:cb:93:35:a4:97:47:05:
                    74:09:e2:0a:2e:b3:ee:c5:39:bc:e6:6a:52:04:c2:
                    d1:71:cd:31:4f:fb:b2:27:87:fc:69:91:8e:9a:51:
                    c8:80:b7:a3:5e:4a:c0:1b:27:29:61:e9:d4:30:d9:
                    a6:aa:8d:4b:96:5a:02:b7:f4:8b:27:b4:2c:a7:8f:
                    00:36:ff:5f:c6:59:29:4c:23:94:0c:6b:c5:b6:b8:
                    63:68:14:db:ac:50:9e:0b:47:a7:8b:4b:ca:28:e9:
                    2e:cc:0b:3f:5e:94:2d:f1:3b:83:c0:08:1d:07:de:
                    72:a7:47:29:cb:ff:21:26:38:0e:2d:1b:69:c1:96:
                    50:e8:5a:ef:f2:51:7b:8c:20:8f:a6:e7:0c:60:ad:
                    04:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:35:1B:51:DA:85:EB:7A:5A:B1:48:D7:3A:B5:BD:AE:11:59:E0:6B
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/GTUbUdqF63pasUjXOrW9rhFZ4Gs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:49:c8:74:2e:f4:e3:fe:e9:54:62:69:e5:ea:6e:a1:36:7e:
         58:fe:5c:b6:24:db:7a:64:cc:e7:2a:ef:23:f7:1c:9c:84:e1:
         cb:fa:a0:5b:ef:8b:40:e1:45:4e:26:ea:9c:de:75:90:94:75:
         34:2f:54:7a:1b:ea:1f:f3:9f:48:0d:75:07:66:e4:77:9d:06:
         86:a2:ec:45:c0:9d:d1:9a:68:9d:f4:44:36:72:51:c6:bb:82:
         2b:a8:62:56:45:1d:7c:78:60:9a:17:bb:34:c8:b9:a3:6b:23:
         3a:54:1f:18:8a:36:fd:f5:26:79:d4:5d:00:60:76:db:25:de:
         58:81:ff:1f:0a:0a:e2:15:6e:eb:32:92:af:d8:39:78:a3:90:
         59:a7:bc:40:13:68:29:5c:e8:e0:d8:f7:25:ff:9b:55:32:9b:
         fe:9c:ae:f8:4f:d5:f0:04:99:90:49:dd:8f:e9:b3:b1:f8:86:
         a5:dc:e0:e7:b5:f6:c8:bd:28:d8:e5:18:99:06:94:b7:09:ce:
         42:48:32:f9:53:da:7e:7c:fe:d1:38:fd:8b:f9:81:9d:80:36:
         7a:a5:ff:34:e8:f8:58:a6:29:c1:95:dc:7c:8c:07:4f:7b:1a:
         17:23:2a:be:b4:d1:c7:c6:27:ef:bd:bd:00:85:06:cb:4c:4f:
         80:62:5d:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:03 2025 by rpki-client